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Abstract: Cloud computing diminishes cost and complexity of service providers by means of 
assets and operational costs. It allows users to access applications tenuously. On behalf of 
user, this construct directs cloud service provider to feel software updates and cost of servers 
etc. For cloud providers and consumers; availability, integrity, authenticity, confidentiality, 
and privacy are important concern. Infrastructure as a Service (IaaS) serves as base layer for 
many other release models and Platform-as-a-Service (PaaS) clouds. In this paper we are 
going to some major security issues of current cloud computing environments. Security of 
PaaS clouds is considered from multiple perspective including access control, service 
continuity and privacy while protecting together the service provider and the user. Security 


problems of PaaS clouds areexplored and classified. 
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1. Introduction 


Existing security-based solutions, including authentication and cryptography-based 
solutions, provide security resolutions to a certain extent and cannot tackle various internal 
attacks. Mostly in academia, more emphasis is being put on the implementation of security 
frameworks in edge-based smart cities. The basic concept behind the edge computing 
networks is to utilize a hierarchy of edge network-based servers with increased computational 
capabilities to handle the mobile and heterogeneous computational tasks typically offloaded 
by low-end edge devices (IoT and mobile devices) [1-11]. Edge computing can support 
evolving smart city applications by providing location-aware, bandwidth-sufficient, real-time, 
privacy-conscious, and low-cost services. Edge computing has grown rapidly in recent years 
as a result of its advantages over CC. Providing by cloud infrastructure providers, data owners 
outsource gradually data to the data centers concluded cloud service providers, e.g., the online 


storage facility providers, which are not completely trusted by data owners. 


To define the relation between entities, the graph has been increasingly used to model 


complicated organizations and schema less data, such as the personal social network (the 
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social graph), the relational data base, Considered for the protection of users’ privacy. These 
sensitive data have to be encrypted before outsourcing to the cloud. Furthermore, nearly data 
are invented to be shared among trusted partners to all organizations [12-26]. There have 
stayed revealed attacks on cloud computing providers and this paper discusses recommended 
steps tohandle cloud security, issues to illuminate before adopting cloud computing, the need 
for a governance strategy and good governance technology, cloud computing strengths, faults, 


analyzes the profits and cloud computing information security management. 


There are several major cloud computing providers with Amazon, Salesforce, Google, 
Yahoo, Microsoft and others that are providing cloud computing services [27-34]. Cloud 
computing providers provide a variety of services to the customers and these services include 
e-mails, storage, infrastructure-as-a-services, software-as-a-services etc. The attractiveness of 
cloud computing is not only to large enterprises but also startups, entrepreneurs, medium 
companies and small companies would benefit greatly and they will have a opportunities and 
alternative that is not available to them in the past that would save them billions of dollars 
because with cloud computing they will have the choice to only rent the necessary computing 
power, communication capacity and storage space from a large cloud computing provider 
that has all of these assets connected towards the Internet [35-42]. In practice, cloud service 
providers tend to offer services thatcan be grouped into three categories: infrastructure as a 


service, platform as a service, and software as a service. 
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Figure 1. Software as a Service (SaaS) (Source: Internet) 


If provide software services on demand. The use of single occurrence of the 


application runs on the cloud services and multiple end users or client organizations. The 
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most usually known example of SaaS is salesforce.com, though many other examples have 
revive market, including the Google Apps offering of basic corporate services including email 
and word processing. Even though salesforce.com led the definition of cloud computing by a 
limited years, it now operates by leveraging its companion force.com, which can be 


demarcated by way of a platform as a service. 


Platform as a service condenses a layer of software and make available it as a service 
that can be used to build higher level services. There are at least two perspectives on PaaS 
provisional on the perspective of the producer or consumer of the services: Someone 
producing PaaS potency produce a platform by participating an OS, middleware, application 
software, and even a development environment that is before provided to a customer as a 
service [43-55]. Someone using PaaS would see an summarized service that is presented to 
them through an API. The customer interacts by the platform through the API, before the 
platform does what is necessary to manage and scale itself to provide a specified level of 
service. Virtual appliances can be hush-hush as instances of PaaS. A content switch appliance, 
for example, would have all of its component software unseen from the customer, and only an 
API or GUI for configuring and deploying the service provided to them. PaaS assistances can 
provide for every phase of software development and testing, or they can be specialized 
everywhere a particular area such as content management. Commercial examples of PaaS 
include the Google Apps Engine, which assists applications on Google’s infrastructure. PaaS 
services such as these can provide a powerful origin on which to deploy applications, 


however they may be forced by the capabilities that the cloudprovider indicates to convey. 


Infrastructure as a service delivers basic storage and computecapabilities as consistent 
services over the network. Servers, storage systems, switches, routers, and other systems are 
united and made available to holder workloads that range from application components to 
high performance computing applications. Commercial samples of IaaS include Joyent, whose 
main product is a line of virtualized servers that afford a highly available on demand 


infrastructure. 
2. Attacks in Cloud Computing 


Cloud computing faces just as much security threats that are at present found in the 
existing computing platforms, networks, intranets, internets in enterprises. These threats, risk 
susceptibilities come in many forms. The Cloud Security Alliance (Cloud Computing 


Alliance, 2010) did a research on the threats roughcast cloud computing and it identified the 
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flowing major threats: 

o Shared Technology Vulnerabilities 

o Failures in Provider Security 

o Availability and Reliability Issues 

o Integrating Provider and Customer SecurityS ystems 
o Legal and Regulatory Issues 

o Insecure Application Programming Interfaces 

o Perimeter Security Model Broken 

o Data Loss/Leakage 

o Malicious Insiders 


With the security risk andsusceptibility in the enterprise cloud computing that are 
being exposed enterprises that want to ensue with cloudcomputing should, use the following 
steps to substantiate andunderstand cloud security providing by a cloud provider: Understand: 
the cloud by appreciating how the cloud's uniquely loose structure affects the security of 
data sent into it. This can be done by consuming an in-depth understanding of how cloud 


computing transmit and handles data. 


Demand Transparency: by constructing sure that the cloud provider can hoard detailed 
information on its security architecture and is agreeable to accept regular security audit. The 


regular security appraisal should be from an independentbody or centralized agency. 


Reinforce Internal Security: by making sure that the cloud provider's internal security 
technologies and practices with firewalls and user access controls are very strong and can 


lattice very well through the cloud security measures. 


Contemplate the Legal Implications: by significant how thelaws and regulations will 
affect what you lead into the cloud. Pay attention: by constantly observing any development 


orchanges in the cloud technologies and practices that mayimpression your data's security. 
3. Implementing Cloud Computing 


The world's important information technology, advisory company, research and has 
identified seven security apprehensions that an enterprise cloud computing user should 


discourse with cloud computing providers before approving. 
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Regulatory Compliance: Create sure your provider is willing to submit to external Audits and 


security certifications. 


User Access. Ask providers for unambiguous information on the hiring and oversight of 
privileged administrators and the controls concluded their access to information. Major 
Companies should demand and enforce their own hiring principles for personnel that will 


operate their cloud computing environments. 


Data Segregation: Realize what is done to segregate your data, and probe for proof that 


encryption schemes are deployed and are effective. 


Data location: Enterprises should necessitate that the cloud computing provider store and 
process data in specific jurisdictions and should follow the privacy rules of those 


Jurisdictions. 


Disaster Recovery Ask the provider for a contractualcommitment to sustenance specific types 
of investigations, such as the research involved in the discovery phase of litigation, and 
verifies that the provider has successfully supported such activities in the past. Deprived of 


evidence, don't assume that it can do so. 


Disaster Recovery Verification Know what will happen if adversity strikes by asking whether 
your provider will be capable of utterly restore your data and service, and find out how long it 


will take. 


Long-term Viability: Ask forthcoming providers how you would get your data back if they 
were to fail or be assimilated, and find out if the data would be in a arrangement that you 


could easily import into a replacement application. 
4. Solutions 


First solution is of verdict the right cloud provider. Different vendors have dissimilar 
cloud IT security and data management. A cloud vendor should be well established, have 


experience, principles and regulation. So there is not some chance of cloud vendor closing. 


Contract with cloud vendor should be clear. So if cloud vendor closes earlier contract, 


enterprise can claim. 


Cloud vendors ought to provide very good recovery facilities. So, if data are 
fragmented or lost because of certainissues, they can be recovered and continuity of data can 


be managed. 
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Enterprise requisite have infrastructure which enables installation and configuration of 
hardware components such as firewalls, routers, software, servers and proxy servers suchas 
operating system, thin clients, etc. Similarly ought to have infrastructure which prevents from 


cyber-attacks. 


Developers should develop the solicitation which provides encrypted data for the 
security. So further security from enterprise is not crucial and all security burdens are placed 
on cloud vendor. IT leaders must define approach and key security components to know 


where the data encryption is needed. 


There should be a chart apropos the tide of data. So the IT managers can have idea 
where the data is on behalf of all the times, where it is being stored and where it is being 


united. There should be total exploration of data. 
5. Conclusions 


Services are to be offered by providers, to consumers with proper SLAs. Basic entities 
of crypto-cloud have the responsibility of maintaining the SLAs. Resource provisioning at any 
time depends on the bandwidth required, CPU, memory and key management amongst others. 
Different levels of SLA's exist and they are customer-based, service-based and multi-level 
SLA. Although Cloud computing can be seen as a new marvel which is set to reform the way 
we use the Internet, there is much to be thoughtful about. There are many new technologies 
emerging at an express rate, each with technological developments and with the potential of 
making human’s lives at ease. However, one must be very careful to appreciate the security 
risks and challenges stood in exploiting these technologies. Cloud computing is no exception. 
In this paper Security issues in Service Model of cloud computing Environment which are 
currently handled in the Cloud computing are highlighted. Cloud computing has the possible 
to become a favorites in stimulating a secure, virtual and economically possible IT solution in 


the forthcoming. 
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